Exam AZ-500 topic 5 question 75 discussion

Contoso: Home tenant (Current tenant and the one needing access to external resources Fabrikam: Resource tenant (the tenant with resource you want to access) Fabrikam is the resource Tenant and https://learn.microsoft.com/en-us/entra/external-id/cross-tenant-access-overview#:~:text=The%20following%20diagram%20shows%20the%20cross

To create an allow list of cloud apps from fabrikam.com that can be used by the users in contoso.com, you should configure the Inbound access settings in Cross-tenant access settings and set up the B2B direct connect settings. So, the correct answer is A. From Inbound access settings in Cross-tenant access settings, configure the B2B direct connect settings. https://learn.microsoft.com/en-us/entra/external-id/tenant-restrictions-v2

Inbound settings control external account access to your internal apps. Outbound settings control internal account access to external apps. https://learn.microsoft.com/en-us/entra/external-id/tenant-restrictions-v2#tenant-restrictions-vs-inbound-and-outbound-settings

https://learn.microsoft.com/en-us/entra/external-id/tenant-restrictions-v2#tenant-restrictions-vs-inbound-and-outbound-settings:~:text=tenant%20access%20policy.-,Tenant%20restrictions%20vs.%20inbound%20and%20outbound%20settings,Outbound%20settings%20control%20internal%20account%20access%20to%20external%20apps,-.

I was wrong... It is A To create an allow list of cloud apps from fabrikam.comthat can be used by the users in contoso.com, you should configure the Inbound access settings in Cross-tenant access settings and set up the B2B direct connect settings. So, the correct answer is A. From Inbound access settings in Cross-tenant access settings, configure the B2B direct connect settings. https://learn.microsoft.com/en-us/entra/external-id/tenant-restrictions-v2

It is from external collaboration settings! -Sign in to the Admin Center -Navigate to External Identities: Go to Identity > External Identities > External collaboration settings. -Configure Outbound Access Settings: These settings control whether your users can access resources in an external organization. You can apply these settings to everyone or specify individual users, groups, and applications3. -Configure Inbound Access Settings: These settings control whether users from external organizations can access resources in your organization. You can apply these settings to everyone or specify individual users, groups, and applications3. -Trust Settings: Determine whether your Conditional Access policies trust the multifactor authentication (MFA), compliant device, and Microsoft Entra hybrid joined device claims from an external organization

To allow users in contoso.com to access cloud apps in fabrikam.com, we should configure an outbound policy

Outbound settings control internal account access to external apps.

Think of the different cross-tenant access settings this way: Inbound settings control external account access to your internal apps. Outbound settings control internal account access to external apps. Tenant restrictions control external account access to external apps. https://learn.microsoft.com/en-us/entra/external-id/tenant-restrictions-v2#tenant-restrictions-vs-inbound-and-outbound-settings By default, B2B collaboration with other Microsoft Entra organizations is enabled, and B2B direct connect is blocked. But the following comprehensive admin settings let you manage both of these features. Outbound access settings control whether your users can access resources in an external organization. You can apply these settings to everyone, or specify individual users, groups, and applications. Inbound access settings control whether users from external Microsoft Entra organizations can access resources in your organization. You can apply these settings to everyone, or specify individual users, groups, and applications. https://learn.microsoft.com/en-us/entra/external-id/cross-tenant-access-overview

Its D. https://learn.microsoft.com/en-us/entra/external-id/tenant-restrictions-v2#tenant-restrictions-vs-inbound-and-outbound-settings